$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: cCTEMWwU3DuvpjVoCygSy/23cM0jf6oGDGR0nls8rjo= Subject key identifier: 00:9C:77:1E:BD:B3:3D:6E:8A:2F:F8:C9:DB:2A:B3:F5:12:9A:FB:26 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A37 Signing time: Sun 10 Aug 2025 19:48:43 +0000 Manifest this update: Sun 10 Aug 2025 19:48:43 +0000 Manifest next update: Sun 17 Aug 2025 19:48:43 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: rPBQmJoIEfWfr2wrb7HBwACY8dMC3eU76vBSOMtWelE=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 19:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2646 (0xa56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Aug 10 19:48:43 2025 GMT Not After : Aug 17 19:48:43 2025 GMT Subject: CN=6898f79b-0440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:8c:be:6a:ee:71:aa:0c:11:bd:ef:9f:c4: 63:7f:39:5b:64:15:1f:04:99:0d:74:6d:73:be:3b: 5d:2d:9e:0d:31:71:9b:de:13:8d:1a:10:d9:66:8a: 58:5b:79:70:ee:13:a8:ef:da:2c:eb:9d:8d:31:15: 50:8e:c0:0d:59:5d:6a:09:ef:cd:d5:0e:cc:e2:46: f2:95:a2:de:8e:5c:e8:e6:cd:97:01:67:7d:89:20: d2:1f:c9:57:76:00:42:8a:b5:85:e9:c8:11:50:88: 2e:45:ed:35:79:d5:ae:f0:85:c0:9a:d4:8d:ba:a6: 16:b5:3d:af:75:8a:79:19:0e:9e:27:0f:9d:29:5f: ba:a2:0b:41:27:d2:a1:65:23:75:ee:43:ee:4d:7f: 81:04:36:78:76:59:9c:d4:9c:97:dc:7a:9e:e8:cf: ba:71:61:98:4d:73:5d:98:c8:a8:5e:5e:e0:33:6a: 58:2d:c0:7f:6d:c6:45:89:c8:2a:90:f1:45:6a:36: 67:49:70:5f:80:eb:0c:a3:f1:c3:50:9c:dc:ff:cd: 2c:20:6b:f4:e2:9c:46:de:42:b2:02:58:c7:5e:3e: d1:52:e0:41:65:9a:3d:15:bb:b9:e8:cf:4d:48:03: bc:55:13:cb:16:9c:7e:8b:4a:5d:c9:42:9e:22:b9: 6e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9C:77:1E:BD:B3:3D:6E:8A:2F:F8:C9:DB:2A:B3:F5:12:9A:FB:26 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:6d:cc:cc:d5:b5:dc:d3:25:0a:dc:85:ba:78:fb:ef:89:39: e9:f2:9e:91:b2:af:78:66:07:e5:27:e5:0b:a9:d6:06:75:4d: 58:17:bb:4f:fd:b1:bc:54:60:53:11:91:7d:ac:df:74:5d:49: 30:45:f1:de:cd:c3:d2:11:7b:2f:56:83:09:76:e7:ac:e0:c0: 9f:41:b7:f3:44:92:0f:1c:dc:2c:da:32:0d:80:2b:b5:b4:c9: 0d:10:f7:81:f8:e4:3e:33:04:0d:c9:d4:07:16:e7:e0:db:90: 4b:d5:a4:98:96:1c:78:a9:86:d9:2b:a3:b9:ab:4f:3f:dd:e7: 42:07:d9:dd:72:e9:3f:52:f1:d4:99:45:58:e7:18:22:85:a2: eb:f2:11:5a:b1:09:aa:1f:da:80:48:d0:21:e7:f7:9f:53:9d: b7:8c:b8:87:36:24:43:4f:6d:78:bf:f1:fc:da:2f:a2:74:cb: f6:11:dd:97:34:63:c0:47:9a:21:3f:ba:43:2c:9a:c6:14:ea: a5:ae:d3:64:7e:ea:e6:65:3d:76:f7:9c:2a:52:76:1d:88:1a: db:22:2d:c2:6c:65:61:c4:4b:a3:19:80:1c:d7:8a:5a:25:cd: b7:fa:19:57:c7:84:36:da:a9:71:c4:b8:f1:6b:d5:e7:20:f3: d0:98:a4:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwODEwMTk0ODQzWhcNMjUwODE3MTk0ODQzWjAYMRYwFAYD VQQDEw02ODk4Zjc5Yi0wNDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0iMvmrucaoMEb3vn8RjfzlbZBUfBJkNdG1zvjtdLZ4NMXGb3hONGhDZZopY W3lw7hOo79os652NMRVQjsANWV1qCe/N1Q7M4kbylaLejlzo5s2XAWd9iSDSH8lX dgBCirWF6cgRUIguRe01edWu8IXAmtSNuqYWtT2vdYp5GQ6eJw+dKV+6ogtBJ9Kh ZSN17kPuTX+BBDZ4dlmc1JyX3Hqe6M+6cWGYTXNdmMioXl7gM2pYLcB/bcZFicgq kPFFajZnSXBfgOsMo/HDUJzc/80sIGv04pxG3kKyAljHXj7RUuBBZZo9Fbu56M9N SAO8VRPLFpx+i0pdyUKeIrlu+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACcdx69 sz1uii/4ydsqs/USmvsmMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+bczM1bXc0yUK3IW6ePvviTnp8p6Rsq94ZgflJ+ULqdYGdU1YF7tP /bG8VGBTEZF9rN90XUkwRfHezcPSEXsvVoMJdues4MCfQbfzRJIPHNws2jINgCu1 tMkNEPeB+OQ+MwQNydQHFufg25BL1aSYlhx4qYbZK6O5q08/3edCB9ndcuk/UvHU mUVY5xgihaLr8hFasQmqH9qASNAh5/efU523jLiHNiRDT214v/H82i+idMv2Ed2X NGPAR5ohP7pDLJrGFOqlrtNkfurmZT1295wqUnYdiBrbIi3CbGVhxEujGYAc14pa Jc23+hlXx4Q22qlxxLjxa9XnIPPQmKTW -----END CERTIFICATE-----Generated at Tue Aug 12 18:19:00 2025 by rpki-client